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Abstract: Cloud computing is the concern of computer hardware and software 
resources above the internet so that anyone who is connected to the internet can 
access it as a service or provision in a seamless way. As we are moving more and 
more towards the application of this newly emerging technology, it is essential to 
study, evaluate and analyze the performance, security and other related problems 
that might be encountered in cloud computing. Since, it is not a practicable way to 
directly examine the behavior of cloud on such problems using the real hardware 
and software resources due to its high costs, modeling and simulation has become 
an essential tool to withstand with these issues. In this paper, we retrospect, 
analyse and compare features of the existing cloud computing simulators and 
various location based authentication and simulation tools. 

Keywords: Cloud Computing; CloudSim; CDOSim; TeachCloud; iCanCloud; 
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INTRODUCTION 


Cloud computing is a assemblage of on hand techniques and technologies, 
packaged within a new and highly scalable infrastructure paradigm that offers 
improved scalability, elasticity, business agility, faster startup time, reduced 
management costs, and just-in-time availability of resources [1]. 

From the past few years, there has been a hasty progress in Cloud Computing. 
It delivers an extensive range of resources like computational platforms, 
computational power, storage and applications to users via internet. The foremost 
Cloud providers in the current market segment are Amazon, Google, IBM, 
Microsoft, Salesforce, etc. [2]. With an ever-increasing number of companies 
resorting to use resources in the Cloud, there is a necessity for protecting the data 
of various users. Some major challenges that are being faced by Cloud Computing 
are to secure, protect and process the data which is the property of the user. 
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CLOUD SIMULATORS 


While grid computing simulators have good but they cannot sufficiently 
model the cloud infrastructure. There are still only a few options for 
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simulating cloud architecture, possibly because virtualization has enabled 
the deployment of virtual private clouds on small scale physical test beds. 
However, there have been some notable proposals for software simulation of 
clouds of very large scale. The CloudSim simulation framework is based on 
the SimJava discrete event simulation engine at the lowest layer, while the 
higher layers implement the GridSim toolkit for the modeling of the cluster, 
including networks, traffic profiles, resources, etc. CloudSim effectively 
extends the GridSim core functionalities by modeling storage, application 
services, resource provisioning between virtual machines, and data centre 
brokerage, and can even simulate federated clouds [2, 3]. 

A. CloudSim 

CloudSim is an extensible simulation toolkit and application which 
promotes and enhances seamless modeling, extensive simulation, 
and experimentation of emerging cloud computing environment, 
infrastructures and application environments for single and many 
internetworked clouds [3, 4], The existing distributed system 
simulators were not applicable to the cloud environment due to 
evaluating the performance of cloud provisioning policies, services, 
application workload, models and resources under varying system, 
user configurations and requirements. To overcome this challenge, 
CloudSim can be used. In simple words, CloudSim is a development 
toolkit for simulation of Cloud scenarios. CloudSim is not a framework 
as it does not provide a ready to use environment for execution of a 
complete scenario with a specific input. Instead, users of CloudSim 
have to develop the Cloud scenario it wishes to evaluate, define the 
required output, and provide the input parameters. 

B. CDOSim 

CDOSim is cloud deployment option (CDO) Simulator which can simulate the 
response times, SLA violations and costs of a CDO. CDOSim is designed to 
concentrate on the major shortcomings of other existing cloud simulators such as 

1. Subsequently oriented towards the cloud user perspective instead of 
exposing fine-grained internals of a cloud platform [5]. 

2. Mitigates the cloud user’s lack of knowledge and control concerning a cloud 
platform structure. 

C. TeachCloud 

TeachCloud is a cloud simulator which is specially made for education purposes. 
TeachCloud provides a simple graphical interface through which students and 
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scholars can modify a cloud’s configuration and perform simple experiments 
[8], TeachCloud uses CloudSim as the basic design platform and introduces 
many new enhancements on top of it such as 

1. Developing a GUI toolkit. 

2. Adding the cloud workload generator to the CloudSim simulator. 

3. Adding new modules related to SLA and BPM. 

4. Adding new cloud network models such as VL2, BCube, Portland and 
DCell. 

D. iCan 

Cloud is a cloud simulator which is based on SIMCAN. In simple words, 
iCanCloud is a software simulation framework for large storage networks. 
iCanCloud can predict the trade-off between costs and performance of a 
particular application in a specific hardware in order to inform the users about 
the costs involved[l,9]. 

E. SPECI 

Simulation Program for Elastic Cloud Infrastructures (SPECI) is a simu¬ 
lation tool which allows analyzing and exploration of scaling properties 
of large data center behavior under the size and design policy of the mid¬ 
dleware as inputs. SPECI is a simulation tool which allows exploration of 
aspects of scaling as well as performance properties of future Data Cent¬ 
ers [10], The aim of SPECI is to simulate the performance and behavior 
of data centers, given the size and middleware design policy as input. 
Discrete event simulations (DES) are a type of simulation where events 
are ordered in time maintained in a queue of events by the simulator and 
each processed at given simulation time. 

Authentication Techniques 

Cloud service providers request customers to store their account information 
in the cloud, cloud service providers have the access to this information. 
This presents a privacy issue to the customer’s privacy information. 
Cloud service providers use different authentication technologies for 
authenticating users. This process serves as a protection against different 
sorts of attacks where the goal is to confirm the identity of a user and 
the user requests services from cloud servers. Multiple authentication 
technologies have been put forward so far that confirm user identity before 
giving the permit to access resources. 
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REVIEW OF LITERATURE 


Sr. 

No. 

Year of 
publica¬ 
tion 

Author 

Title 

Journal 

Listing 

Findings of the study 

1. 

2012 

Debabrata 
Dey, Atanu 
Lahiri, and 
Guoying 
Zhang 

Hacker 
Behaviour, 
Network Ef¬ 
fects, and the 
Security Soft- 
wre Market 

Journal of 
Management 
Information 
Systems 

ABDC 

1. There are neg¬ 
ative network 
effect from indi¬ 
rect attacks and 
positive network 
effect from vul¬ 
nerability-based 
attacks [1]. 

2. Consequent¬ 
ly there is a 
negative network 
effect from 
strategic hacker 
behavior [1]. 

2. 

2013 

Vidyanand 
Choudhary 
and Joseph 
Vithayathil 

The Impact 
of Cloud 
Computing: 
Should 

the IT De¬ 
partment Be 
Organized as a 

Cost Center 
or a Profit 
Center? 

Journal of 
Management 
Information 
Systems 

ABDC 

1. The stylized mod¬ 
el is employed 

to analyze the 
impact of cloud 
computing on 
the choice of 
organizational 
structure for the 

IT department by 
making simplify¬ 
ing assumptions 
[2]. 

2. The mission of 
the IT department 
would transition 
to determining the 
means by which 
the IT personnel 
can ensure that 
enhancements 

to cloud-based 
services fit the 
current and future 
needs of the con¬ 
suming units [2]. 

3. 

2014 

A.K. R. 
Parveen 
Kumar 

An overview 
and survey of 
various 

cloud simula¬ 
tion tools 

Journal of 

Global Research 
in Computer 

Science 

ABDC 

1. Detailed analyt¬ 
ical and com¬ 
parative analysis 
of various cloud 
simulators used 
in the world of 
cloud computing 
[!]■ 
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4. 

2014 

Poonam M. 
Pardeshi, 

Prof. Bharat 
Tidke 

Improving 

Data Integrity 
for Data Stor¬ 
age Security 
in Cloud 
Computing 

International 
Journal of Com¬ 
puter Science 
and Information 
Technologies 


1. A secured and 
efficient AES 
based system has 
been proposed for 
auditing user data 
stored at un-trust- 
ed server [7]. 

2. The system guar¬ 
antees data the 
achievement of 
data integrity and 
availability [7]. 

5. 

2014 

Jashanpreet 
Pal Kaur, 
Rajbhupin- 
der Kaur 

Multilayered 
Security 
Approach for 
Cloud Data 
Centers using 
Hash Func¬ 
tions 

International 
Journal of 

Science and Re¬ 
search (IJSR) 


1. The dynamic hash 
keys are generated 
for the authentica¬ 
tion purpose using 
hybrid approach 
til], 

2. The cloud data 

centers are 
accessed by au¬ 
thenticated clients 
using secured shell 
and encrypted 
transmission via 
brokers. If the 
client’s authenti¬ 
cation failed then 
it terminates the 
execution [11]. 

6. 

2014 

G. Vi- 
jayanand 
et al. 

Overcome 
vampire at¬ 
tacks problem 
in wireless ad- 
hoc sensor net¬ 
work by using 
distance vector 
protocols 

International 
Journal of Com¬ 
puter Science 
and Mobile 
Applications 

Vol.2 Issue. 1 

ISSN: 2321- 
8363 


1. Guarantee Loop 
Freeness [13] 

2. Allow fast reaction 
to topology chang¬ 
es [13]. 

7. 

2012 

Jie Liu, 

Bodhi Pri- 
yantha, Ted 
Hart, Heitor 

S. Ramos, 
Antonio A.F. 
Loureiro 

Energy 

Efficient 

GPS Sensing 
with Cloud 
Offloading 

SenSys’ 12, 
Copyright c 

2012 ACM 978- 
1-4503-1169-4 

ABDC 

1. Evaluates the qual¬ 
ity and limitations 
of the CO-GPS 
approach using 
raw GPS samples 

[17]- 

2. The use of CTN 
technique adds ad¬ 
ditional potential 
error, especially 
when the number 
of satellites is low 
[17], 
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8. 

2015 

Raj kumar 

Research on 
cloud comput¬ 
ing security 
threats using 
data transmis¬ 
sion 

International 
journal of Ad¬ 
vanced Research 
in Computer 
Science & S/W 
Engineering 

Vol5 Issue 1 
ISSN:2277 


1. Both the Service 
providers and the 
clients must work 
together to ensure 
safety and security 
of cloud and data 
on clouds [18]. 

2. This study iden¬ 
tifies top security 
concerns of cloud 
computing, these 
concerns are Data 
loss, Leakage of 
Data, Clients 
trust, User‘s 
Authentication, 
Malicious users 
handling, Wrong 
usage of Cloud 
computing and its 
services [18]. 


9. 

2015 

R. Ve- 
lumadhava 
Raoa„ K. 
Selvamanib, 

Data Security 
Challenges and 
Its Solutions 
in Cloud Com¬ 
puting 

International 
Conference 
on Intelligent 
Computing, 
Communication 
& Convergence 

Elsevi¬ 

er 

1. Proper key 
management tech¬ 
niques can be used 
to distribute the 
key to the cloud 
users such that 
only authorized 
persons can access 
the data [25]. 

2. To provide a 
secure data access 
in cloud, advanced 
encryption 
techniques can be 
used for storing 
and retrieving data 
from cloud. 

10. 

2014 

Monjur 
Ahmed & 
Mohammad 
Ashray 

Cloud com¬ 
puting and 
security issues 
in the cloud 

International 
Journal of Net¬ 
work Security & 
Its Applications 
(IJNSA), Vol.6, 
No.l, January 
2014 


1. Cloud computing 
is a great opportu¬ 
nity and lucrative 
option both to the 
businesses and the 
attackers [32]. 

2. The vastness and 
potentiality of 
cloud Computing 
cannot be over¬ 
looked, subse¬ 
quently robust 
security models 
for cloud com¬ 
puting scenarios 
is the most prior¬ 
itized factor for a 
successful cloud 
based infrastruc¬ 
ture development 
and deployment. 
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RESEARCH METHODOLOGY 

1) Simulation Engine (Several simulators have been specifically developed 
for performance analysis of cloud computing environments [1], including 
CloudSim, GreenSim, SPECI, GROUDSIM, and DCSim). 

2) Spreadsheet Plug-ins for parameter analysis 

3) Implementation of cryptography and secured layered in the proposed 
algorithmic approach [11]. 

4) CloudSim or relevant simulator is a toolkit for the modeling and simulation 
of Cloud computing environments. 

5) Enabling Public Audit ability and Data Dynamics for Storage Security in 
Cloud Computing can be done where the third party auditor (TPA), who has 
expertise and capabilities that cloud users do not have and is trusted to assess 
the cloud storage service security on behalf of the user upon request [13,15]. 
In addition to this various authentication techniques and parameters have 
been discussed further. 
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EXPECTED CONTRIBUTIONS OF PH.D. WORK 

Security is the main concern for cloud computing and also choosing the 
comprehensive simulator for simulation is desired. Thus various authentication 

techniques will be compared and analysed along with various cloud simulators. 
Authentication can be done in various ways: 

• Authentication using Kerberos. 

• Authentication using Key Distribution Centre. 

• Authentication using Public Key Infrastructure. 

A. Authentication using Kerberos 

Kerberos is the authentication technique which is used to authenticate the 
clients to the server in the Client-Server architecture model. Cloud Computing 
can also be viewed as distributed Client-Server architecture, where Cloud 
Provider is the Server and Cloud User is the Client., which communicates by 
the intermediater , named as Cloud Broker. The two main components are- 
Ticket Granting Server and Authentication Server [16]. 

(1) Cl ASS: IDC||PC||IDV 

(2) AS Cl Ticket 

(3) C Z: IDClj|Ticket 

Ticket = E(Kv, [IDC|!ADC||IDZ]) 

Where 

Cl=Client 

ASS=Authentication System Server 
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Z=Server 

IDC=Identifier of user on Cl 
IDZ=Identifier of Server 
PC=Password of user on Cl. 

ADC= Network Address of Cl 

KV= Secret Encryption key shared by ASS and Z 

B. Authentication using Key Distribution Centre 

A issues a request to the KDC for a session key to shield a logical connection 
to B. This message includes the distinctiveness of A and B and a exceptional 
or unique identifier, N1, for this transaction, which we refer to as a nonce The 
nonce might be a counter, a timestamp, or a random number; the minimum 
requisite is that it differs with each request. Also, to prevent masquerade, it 
should be difficult for an opponent to guess the nonce. Thus, a random number 
is a good choice for a nonce. The KDC responds with a message encrypted us¬ 
ing Ka Thus, A is the only one who can successfully read the message, and A 
knows that it originated at the KDC. The message includes two items intended 
for A: 

1. The one-time session key, Ks, to be used for the session. 

2. The original request message, including the nonce, to enable A to match this 
response with the appropriate request Thus, A can verily that its original 
request was not altered before reception by the KDC and, because of the 
nonce, that this is not a replay of some previous request. In addition, the 
message includes two items intended for B: 

3. The one-time session key, Ks to be used for the session 

4. An identifier of A (e.g., its network address), IDA 

5. These last two items are encrypted with Kb (the master key that the KDC 
shares with B). They are to be sent to B to establish the connection and 
prove A’s identity. A stores the session key for use in the upcoming session 
and forwards to B the information that originated at the KDC for B, namely, 
E(Kb, [Ks || IDA]). Because this information is encrypted with Kb, it is 
protected from eavesdropping. B now knows the session key (Ks), knows 
that the other party is A (from IDA), and knows that the information 
originated at the KDC (because it is encrypted using Kb). At this point, a 
session key has been securely delivered to A and B, and they may begin their 
protected exchange. However, two additional steps are desirable: 

6. Using the newly minted session key for encryption, B sends a nonce, N2, to 
A. 

7. Also using Ks, A responds with f(N2), where f is a function that performs 
some transformation on N2 (e.g., adding one). 
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C. Authentication using Public Key Infrastructure 

The components of PKI are listed below: 

8. End entity: A generic term used to denote end users, devices (e.g., servers, 
routers), or any other entity that can be identified in the subject field of a 
public key certificate. End entities typically consume and/or support PKI- 
related services. 

9. Certification authority (CA): The issuer of certificates and (usually) certificate 
revocation lists (CRLs). It may also support a variety of administrative 
functions, although these are often delegated to one or more Registration 
Authorities [17, 18] 

10. Registration authority (RA): An optional component that can assume a 
number of administrative functions from the CA. The RA is often associated 
with the End Entity registration process, but can assist in a number of other 
areas as well. 

11. CRL issuer: An optional component that a CA can delegate to publish CRLs. 

12. Repository: A generic term used to denote any method for storing certificates 
and CRLs so that they can be retrieved by End Entities. Thus Registration 
authority is thus dependent on Repository and thus the authentication 
strategy thus can be embedded [20, 22], 
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MAJOR FINDINGS AND CONCLUSION 


Table 1: Comparative analysis of various cloud simulators with respect to dif¬ 
ferent properties 


Cloud Simu¬ 
lators 

Platform 

GUI Sup¬ 
port 

Support 
of TCP/IP 

Language 

support¬ 

ed 

S/w or 
H/W 

Availability 

SPECI 

SIMKIT 

Limited 

None 

Java 

s/w 

Open source 

CLOUDSIM 

GRIDSIM 

Limited 

None 

Java 

s/w 

Open source 

OCT 

DISTRIB¬ 

UTED 

CLOUD 

TESTBED 

Limited(via 
open cloud 
testbed) 

Na 

n/a 

Both 

Registration 
is needed 

GREEN 

CLOUD 

Ns2 

Nam 

Full tcp/ip 
support 

C++,otcl 

s/w 

Open source 

GROUDSIM 

Na 

None 

Full tcp/ip 
support 

Java 

s/w 

Na 

OPENCIRRUS 

Heteroge¬ 
nous data 

centres 

None 

Na 

Na 

Both s/w 
and h/w 

Open source 
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NETWORK 

CLOUDSIM 

Cloudsim 

None 

None 

Java 

s/w 

Open source 

EMUSIM 

Aef,cloud¬ 
sim 

Limited 

None 

Java 

s/w 

Open source 

DCSIM 

Na 

None 

No support 

Java 

s/w 

Open source 

TEACH- 

CLOUD 

Cloudsim 

Full gui kit 

None 

Na 

s/w 

Open source 

CDOSIM 

Cloudsim 

None 

No support 

Java 

s/w 

Na 

GDCSIM 

Bluetool 

No gui sup¬ 
port 

None 

C++/xml 

s/w 

Open source 

MDCSIM 

Csim 

No gui sup¬ 
port 

None 

C++/java 

s/w 

Commercial 

NETWORK- 

CLOUDSIM 

Only cloud 
analyst 

Grid sim 

Supports 
only high 
perfor¬ 
mance 

computer 

applica¬ 

tions 

Java 

s/w 

Open 
source(ex- 
tension of 
cloudsim) 


Thus numerous cloud simulation tools have been compared and projected 
along with their properties with respect to their TCP/IP support, GUI support 
and other related factors. Hence after analyzing various parameters of 
different simulators and the fact that cloudsim uses gridsim as platform and 
Grid computing has emerged as the next-generation parallel and distributed 
computing that aggregates dispersed heterogeneous resources for solving a 
range of large-scale parallel applications in science, engineering and commerce 
it is concluded that CloudSim simulator is probably the most sophisticated and 
user friendly among the simulators overviewed. 
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